Home  /  Privacy Policy

Legal & Compliance

Privacy policy

How Genera House collects, processes, and protects your personal data in strict compliance with the UK Data Protection Act, UK GDPR, and EU GDPR.

Data controller & contacts

For the purpose of applicable data protection laws, including the UK Data Protection Act 2018, the UK General Data Protection Regulation (UK GDPR), and the EU General Data Protection Regulation (Regulation EU 2016/679), the Data Controller is:

Dr. Bianca Serwinski
Genera House Private Practice
London, United Kingdom
Email: practice@generahouse.com

The information we collect

We collect personal data only when strictly necessary. This happens primarily when you communicate with us through our private enquiry form or directly via email. The information collected may include:

  • Identity Data: Full name.
  • Contact Data: Email address, phone number.
  • Enquiry Data: The subject and details of your request regarding family dynamics, succession, or legacy challenge (which may contain sensitive information).
  • Technical Data: If you accept optional cookies, basic analytics data regarding your visit (IP address, browser type, pages visited).

How we use your personal data

We process your information in accordance with the highest professional and legal standards. Your data is used to:

  • Process, evaluate, and respond to your confidential consultation request.
  • Verify your request through the secure opposite-of-public anti-spam validation.
  • Schedule and manage consultations.
  • Maintain secure communications regarding our advisory or clinical psychological work.
  • Maintain compliance with professional regulatory requirements defined by the UK Health and Care Professions Council (HCPC).

Under the UK/EU GDPR, we process your personal data under the following legal bases:

  • Consent: By filling out the private enquiry form, you consent to us processing your details to contact you. You may withdraw consent at any time.
  • Contractual Necessity: To take steps at your request prior to entering into a consultation contract.
  • Legitimate Interests: To run our professional practice securely, protect our systems from spam/abuse, and ensure a high standard of clinical/advisory service.

Data retention & security

We do not retain personal data longer than necessary for the purposes for which it was collected. Our security measures include:

  • Secure Submission: Contact details are sent securely over HTTPS via a secure, authenticated webhook channel directly to our internal automation system (n8n).
  • Data Minimisation: We do not compile digital, centralized client diaries or profiles.
  • Strict Access Control: Personal and family details are restricted solely to Dr. Bianca Serwinski and are protected with industry-standard encryption.

International transfers

If we transfer or process your data outside the United Kingdom or the European Economic Area (EEA), we ensure appropriate safeguards are in place (such as Standard Contractual Clauses or UK International Data Transfer Agreements) to guarantee that your information remains fully protected under standards equivalent to the UK GDPR.

Your statutory rights

Depending on your jurisdiction, you have the following rights regarding your personal data:

  • The right to request access to and receive copies of your personal data.
  • The right to request rectification of any inaccurate information.
  • The right to request erasure ("right to be forgotten") of your data.
  • The right to object to or restrict the processing of your data.
  • The right to withdraw your consent at any time.

To exercise any of these rights, please contact us at practice@generahouse.com. If you are in the UK and believe we have not processed your data legally, you have the right to lodge a complaint with the **Information Commissioner's Office (ICO)** (ico.org.uk).